Solved

Domain Trusts not working.  No Logon servers available to service the request.

Posted on 2011-09-07
15
1,200 Views
Last Modified: 2012-08-13
Morning Experts,

We currently have one domain called "ABC" (Windows 2003) and have created a new domain "DEF" (Windows 2008).  Both domains are are the same IP range and same subnet within the same network and use the same DNS servers.  I would like the  users to be able to access servers (NAS) on both domains.  I have set up the domain trusts but seem to be having some issues.  Servers on the ABC domain can access the shares with the DEF domain with no issues but when try to open a share from the DEF the to ABC domain I get the follow error \\NAS-SERVER is not accessible.  You might not have permissions to use this network resource.  Contact the administrator to find out of you have access permission.  There are currently no logon servers available to service the logon request."   I am trying the with the administrator account the on DEF domain.

Any ideas would be very much appreciated.

Thanks
0
Comment
Question by:Simon2301
  • 8
  • 7
15 Comments
 
LVL 26

Expert Comment

by:gtworek
Comment Utility
Are you sure your DNS configuration is OK? Do you use AD integrated zones? How names are resolved in your environments?
0
 

Author Comment

by:Simon2301
Comment Utility
What do I need to check.  My knowledge on DNS isn't up there.  And not using AD intergrated Zones.
0
 
LVL 26

Expert Comment

by:gtworek
Comment Utility
What are your DCs IP addresses? What DNS servers your clients use?
0
 

Author Comment

by:Simon2301
Comment Utility
ABC domain 192.168.2.6 and DEF domain 192.168.2.48.  DNS Servers are 192.168.2.6 and 192.168.2.8
0
 
LVL 26

Accepted Solution

by:
gtworek earned 500 total points
Comment Utility
This is definitely wrong. Windows client will use the first DNS and never will "ask" second one if the first one is working.
You should configure forwarding on DNS for ABC domain and configure all your clients to use only ABC domain DNS servers.
Then it should work as you expect.
0
 

Author Comment

by:Simon2301
Comment Utility
Thats how its currently setup.  DEF is using ABC domains DNS servers
0
 
LVL 26

Expert Comment

by:gtworek
Comment Utility
As DNS servers? As forwarders?
You did not describe your environment but I'm sure something is not OK with your DNS infrastructure...
0
IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

 

Author Comment

by:Simon2301
Comment Utility
The DNS will be is being provided by the ABC domain.  DEF is able to browse the web and so on using ABC dns server (192.168.2.6.  What do I need to check on DNS on both domains?
0
 
LVL 26

Expert Comment

by:gtworek
Comment Utility
If so - why did you set 192.168.2.8 on your clients?
0
 

Author Comment

by:Simon2301
Comment Utility
Our clients pick up 192.168.2.6 and 192.168.2.8 from DHCP.  Just incase 2.6 falls over.
0
 
LVL 26

Expert Comment

by:gtworek
Comment Utility
And what is 192.168.2.8? Is it the second server for ABC?
0
 

Author Comment

by:Simon2301
Comment Utility
yes
0
 

Author Comment

by:Simon2301
Comment Utility
abc can view a nas on def without issues the problem is def seeing the nas on abc
0
 
LVL 26

Expert Comment

by:gtworek
Comment Utility
Is nas registered in DNS you use?
Did you try to access nas using FQDN?
0
 

Author Comment

by:Simon2301
Comment Utility
Just tried it and now getting "has-server.abc.local is not accessible.  You might not have permissions to use this network resource.  The servers clock is not synchronised with the primary domain controllers clock"

I have tried running net time \\print-server / set /y (print is our ntp) and its returning with system 5 error access is denied.

I have tired setting the permission on the has with abc domain but it can find def\administrator
0

Featured Post

Maximize Your Threat Intelligence Reporting

Reporting is one of the most important and least talked about aspects of a world-class threat intelligence program. Here’s how to do it right.

Join & Write a Comment

I had a question today where the user wanted to know how to delete an SSL Certificate, so I thought that I would quickly add this How to! Article for your reference. WHY WOULD YOU WANT TO DELETE A CERTIFICATE? 1. If an incorrect certificate was …
Setting up a Microsoft WSUS update system is free relatively speaking if you have hard disk space and processor capacity.   However, WSUS can be a blessing and a curse. For example, there is nothing worse than approving updates and they just have…
This tutorial will show how to push an installation of Backup Exec to an additional server in both 2012 and 2014 versions of the software. Click on the Backup Exec button in the upper left corner. From here, select Installation and Licensing, then I…
This tutorial will give a an overview on how to deploy remote agents in Backup Exec 2012 to new servers. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as connecting to a remote Back…

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now